Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: XSu40w6u3LgEXkRft6n/ImBGF+D3Hjm2s7YwlC6Acqw=
Subject key identifier: 35:70:2D:1E:76:8F:6B:2D:7D:C2:21:5E:0E:B9:EE:0E:CC:DC:2F:79
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019F4B0BE2E959405543BD3ADF58D82BB095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 19A3
Signing time: Fri 10 Jul 2026 08:01:37 +0000
Manifest this update: Fri 10 Jul 2026 08:01:37 +0000
Manifest next update: Sat 11 Jul 2026 08:01:37 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: ub+cuePUoemCdLhrXUW+cTnp/klsxWGHnyujRBMxua8=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:0b:e2:e9:59:40:55:43:bd:3a:df:58:d8:2b:b0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Jul 10 08:01:37 2026 GMT
Not After : Jul 11 08:01:37 2026 GMT
Subject: CN=35702d1e768f6b2d7dc2215e0eb9ee0eccdc2f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:77:15:2b:42:de:2f:a0:c0:0b:ee:a7:25:
37:8b:50:bd:f5:1b:ea:8b:dd:5e:69:36:8e:fc:a3:
a5:40:34:61:9d:d6:44:8d:ca:ec:43:bc:4d:24:1f:
dd:7d:53:81:1e:80:77:d4:7e:fc:5d:65:71:36:a6:
30:6f:ab:75:49:12:f1:37:a0:a8:b3:98:92:f2:d0:
6d:6a:4b:c9:c6:52:6e:5f:2e:65:9c:49:ae:12:15:
f7:97:12:71:b3:3c:5a:93:8a:d3:fa:a7:3d:c7:a0:
2a:be:a6:02:05:ea:5b:3d:49:60:a3:c6:8d:91:cf:
0a:cf:35:0f:82:6d:57:13:05:01:36:35:67:a9:c4:
a6:1a:56:c9:df:20:fd:2a:dc:95:76:87:6a:a9:f1:
2c:11:aa:6a:aa:e0:cf:d3:f1:2f:96:f6:6e:79:ea:
c0:91:d5:a0:f7:df:82:71:b7:fd:62:5c:ce:b8:81:
38:6c:bc:34:cf:0f:f5:dc:7e:e6:55:94:e3:6e:13:
16:54:d5:28:1f:01:81:72:d5:43:ec:dd:42:c3:26:
3c:07:71:05:f3:9f:c5:1d:d3:48:64:5e:8f:be:99:
a6:41:c0:ac:b7:01:ca:d5:b3:11:e1:3b:8a:8b:f1:
1a:1d:60:0f:e7:b8:fb:e8:ca:79:ee:00:1c:aa:74:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:70:2D:1E:76:8F:6B:2D:7D:C2:21:5E:0E:B9:EE:0E:CC:DC:2F:79
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9a:af:95:e8:fc:ce:10:40:2b:4c:61:98:f2:00:f3:d8:15:
8f:2a:3d:61:ae:45:94:63:6b:88:f0:06:dc:e1:58:7a:1c:8e:
7b:16:c5:7f:a9:3f:eb:8f:a8:01:7a:c4:7a:74:3d:95:0e:e5:
80:41:54:0d:5a:dc:de:4f:92:81:30:3d:6b:44:42:b0:85:69:
54:dd:fb:10:9f:40:cd:89:5e:6b:98:71:91:5b:3b:62:54:6a:
34:16:58:ef:ea:42:fd:df:5d:f1:c7:b7:29:84:dc:40:14:7e:
86:c1:92:8d:fa:75:a7:5c:ad:df:76:61:9c:50:44:e4:15:00:
08:aa:31:7d:c4:1c:9b:78:a1:e5:ad:35:77:2b:38:8c:6a:a0:
5d:b6:07:a2:a0:38:b2:62:50:a9:bb:52:ce:df:77:46:dd:83:
86:e2:fb:d9:35:3e:fc:cf:b8:81:04:4c:00:1f:96:61:02:97:
26:20:f6:0b:8a:85:15:a7:d1:c7:69:0f:4f:1b:a9:41:a3:ca:
b9:ba:c9:00:70:8f:2a:b8:8b:f9:3b:46:ec:26:88:a5:f0:df:
44:12:95:fa:7e:d4:e8:e5:7e:f8:bc:b4:dd:de:a4:64:ba:bc:
46:49:9a:79:8e:3e:e6:98:63:a4:a1:79:e6:67:8a:73:f8:f0:
8c:af:7c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9LC+LpWUBVQ70631jYK7CVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDIxM2FiYTFlYTkyOGI5ZWQzMjQ5MWRlOWJhMTA0NjRi
MDYzNmMwHhcNMjYwNzEwMDgwMTM3WhcNMjYwNzExMDgwMTM3WjAzMTEwLwYDVQQD
EygzNTcwMmQxZTc2OGY2YjJkN2RjMjIxNWUwZWI5ZWUwZWNjZGMyZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8l3FStC3i+gwAvupyU3i1C99Rvq
i91eaTaO/KOlQDRhndZEjcrsQ7xNJB/dfVOBHoB31H78XWVxNqYwb6t1SRLxN6Co
s5iS8tBtakvJxlJuXy5lnEmuEhX3lxJxszxak4rT+qc9x6AqvqYCBepbPUlgo8aN
kc8KzzUPgm1XEwUBNjVnqcSmGlbJ3yD9KtyVdodqqfEsEapqquDP0/EvlvZueerA
kdWg99+Ccbf9YlzOuIE4bLw0zw/13H7mVZTjbhMWVNUoHwGBctVD7N1CwyY8B3EF
85/FHdNIZF6PvpmmQcCstwHK1bMR4TuKi/EaHWAP57j76Mp57gAcqnTS9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVwLR52j2stfcIhXg657g7M3C95MB8GA1UdIwQY
MBaAFGMCE6uh6pKLntMkkd6boQRksGNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQt
OGY0YzU5ZWMyMGJlLzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQtOGY0YzU5ZWMyMGJl
LzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJqvlej8
zhBAK0xhmPIA89gVjyo9Ya5FlGNriPAG3OFYehyOexbFf6k/64+oAXrEenQ9lQ7l
gEFUDVrc3k+SgTA9a0RCsIVpVN37EJ9AzYlea5hxkVs7YlRqNBZY7+pC/d9d8ce3
KYTcQBR+hsGSjfp1p1yt33ZhnFBE5BUACKoxfcQcm3ih5a01dys4jGqgXbYHoqA4
smJQqbtSzt93Rt2DhuL72TU+/M+4gQRMAB+WYQKXJiD2C4qFFafRx2kPTxupQaPK
ubrJAHCPKriL+TtG7CaIpfDfRBKV+n7U6OV++Ly03d6kZLq8RkmaeY4+5phjpKF5
5meKc/jwjK98Uw==
-----END CERTIFICATE-----
Generated at Fri Jul 10 16:39:24 2026 by rpki-client